How to Remove XP Defender Plus 2013 Virus

You did not install XP Defender Plus 2013 but it suddenly appears in your computer? It starts to scan your computer and tells you that your computer is in a high-risk condition? What is XP Defender Plus 2013 on earth? Do you really need to pay to activate it to fix the computer? Have no way to uninstall it for it has taken over your computer? How to remove it completely?

XP Defender Plus 2013 Instruction:

XP Defender Plus 2013 is a virus pretending to be a professional antivirus program, which indeed doesn’t have a virus-scanning engine or a virus definition database and is able to infect computers with Windows XP operating system. Usually, it is bundled with some unknown free software, malicious websites or links and spam email attachments. There are some other viruses that act the same, such as Win 7 Defender Plus 2013 Virus, XP Anti-Virus 2013 Virus and Vista Anti-Virus 2013 Virus. Please be more careful when you are surfing the Internet if you don’t want to encounter this kind of terrible virus.

When XP Defender Plus 2013 sneaks into your computer successfully, it starts to take malicious actions to modify registry entries and other important system files, which enables it to concrete its existence and control your computer. You can see it scanning your system every time you start the computer and a list of dangerous viruses and high-risk leaks will be listed after the scan. Then this virus will prompt you to purchase its full version which would supposedly fix the computer. In fact, those listed viruses and leaks are nonexistent. The scan results are the same on every infected computer, which is just to scare you into believing that your computer are serious infected. XP Defender Plus 2013 is designed by cyber criminals with the purpose of swindling unsuspecting computer users’ money away. Moreover, it is able to take over your computer and prevent you from visiting websites or running program. Thus, you may compromise and choose to pay as it requires. But you shall realize that it is a scam and your computer will still be infected even if you pay the money to the cyber criminals. What they want is more money. We highly suggest you to get rid of this fake antivirus program as quickly as possible before more losses and more damages to your computer.

So far, there is no antivirus program that can handle XP Defender Plus 2013 completely. Instead, this virus can block or disable many tasks in the infected computer including the legitimate antivirus programs. Therefore, manual removal is the best way to get rid of it. But please notice that removing virus is not as simple as uninstalling program and any wrong operation will lead to mistakes damaging your system seriously.

Manual Removal Guides:

1. Access Safe Mode with Networking

Restart your computer, immediately, quickly and repeatedly hit F8 key before the Windows start-up screen shows. Select “Safe Mode with Networking”, and then press Enter key.

2. End processes of the virus

Press Ctrl+Alt+Del keys together and end the virus processes in the Processes tab of Windows Task Manager.

Random.exe (The names of the virus processes may be different all the time)

3. Show hidden files

(1). Click on the Start button and then on Control Panel

(2). Click on the Appearance and Personalization link

(3). Click on the Folder Options link

(4). Click on the View tab in the Folder Options window

(5). Choose the Show hidden files, folders, and drives under the Hidden files and folders category

(6). Click OK at the bottom of the Folder Options window.

4. Delete virus files

(1). Delete the related registry entries to this virus through Registry Edit

Guides to open registry editor: Click “Start” menu, hit “Run”, then type “regedit”, click “OK”

While the Registry Editor is open, search and delete the following registry entries listed below:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\[RANDOM CHARACTERS].exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” =

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0

(2). Find out and remove the associated files of this virus.

%AppData%\Roaming\Microsoft\Windows\Templates\random.exe

%Temp%\random.exe

%AppData%\random\””

%CommonStartMenu%\Programs\[winxp defender plus 2013].lnk

5. Restart the computer to normal mode after the above steps are done.

Video Shows You How to Safely Modify Windows Registry Editor:

XP Defender Plus 2013 is a newly released virus which disguises itself as a legitimate antivirus program. Inexperienced users may be easily cheated by it and finally pay to buy the so-called full version of this fake antivirus program. In fact, it itself is a virus created by cyber criminals aiming at ripping the computer users off by fake scan results. Moreover, you cannot access Internet or run programs normally until you remove the virus completely. Please do not trust the scan results it displays, and remove it as soon as possible.

If you have no idea of how to do that, please contact experts from YooCare Online Tech Support for further help.

Published by on February 25, 2013 11:23 am, last updated on February 25, 2013 11:23 am